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5 B A C K GROU N D OF THE I N VENTIO N 

1) FXeia of the Invention 

The present invention relates to an electronic 
wallet management system which controls electronic wallet 
devices for monetary data transfer, an electronic wallet 

10 device itself, an electronic wallet management unit, a 
terminal station therefor, as well as to a storage medium 
containing an electronic wallet managing program. More 
particularly, the present invention relates to an 
electronic wallet management system which deals with the 

15 loss or failure of electronic wallet devices, as well as 
to an electronic wallet device, an electronic wallet 
management unit, and a terminal station designed therefor. 
The present invention also relates to a storage medium 
containing an electronic wallet managing program for 

20 realizing the system. 

2) Description of the Related Art 

Electronic wallet devices carry electronic money. 
People use them to make payment electronically, without 
using real money. Electronic wallet provides various 
25 advantages over cash, one of which is that payment can be 
made more promptly because there is no need to give or 
receive the change. 
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People may, however, lose their electronic wallet 
devices at times. The loss of electronic wallet devices 
may be handled variously, depending on their device type. 
For example, in the case of prepaid type devices, which 
5 can be used without user authentication, there is no way 
for the loser to have his/her electronic wallet reissued. 
This means that the loser would not be able to recover the 
electronic money at all, unless he/she discovers the very 
device that is missing. In contrast to this, such 

10 electronic wallet devices that require user authentication 
can be reissued at their respective issuing financial 
institutions when they are lost. In this case, the 
monetary data remaining in the lost electronic wallet will 
eventually be carried over to the reissued device, thus 

15 allowing the owner to use it without problems. 

Reissuing of such an electronic wallet, however, 
consumes a long time. Specifically, those that require 
later settlement, like securities, may take a few months 
to be reissued. Another such example is banking cards, 

20 which manage monetary data not directly, but only through 
the customers' bank accounts. It takes a couple of weeks 
for the loser to get such a banking card reissued. What is 
worse is that the customer cannot spend his/her own money 
during the time he/she waits for the delivery of a 

25 reissued electronic wallet. Those problems in connection 
with the loss of electronic wallets are also true in 
another situation where the customer's electronic wallet 
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device is broken down. 

SUMMARY OF THE INVENTION 
Taking the above into consideration, an object of 
5 the present invention to provide an electronic wallet 
management system which eliminates the inconvenience that 
one may encounter when his/her electronic wallet is lost 
or broken down* 

It is another object of the present invention to 
10 provide an electronic wallet device which minimizes the 
inconvenience that one may encounter when it is lost or 
broken down . 

It is still another object of the present 
invention to provide an electronic wallet management unit 
15 which minimizes the inconvenience that one may encounter 
when his/her electronic wallet device is lost or broken 
down. 

It is yet another object of the present invention 
to provide a terminal station which minimizes the 
20 inconvenience that one may encounter when it is lost or 
broken down . 

It is a further object of the present invention to 
provide a storage medium containing an electronic wallet 
management program which minimizes the inconvenience that 
25 one may encounter when his/her electronic wallet device is 
lost or broken down. 

To accomplish the above objects, according to the 
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present invention, there is provided an electronic wallet 
management system which manages an electronic wallet 
devices holding monetary data. This system comprises the 
following elements: backup condition testing means for 
5 testing predefined backup conditions to determine whether 
to make a backup, when the electronic wallet device 
communicates with any other device to transfer monetary 
data; backup data sending means for sending out a 
predetermined set of backup data collected from the 

10 electronic wallet device, when the backup condition 
testing means has determined to make a backup; and backup 
data management means for receiving the backup data from 
the backup data sending means and saving the received 
backup data into a backup database. 

15 The proposed electronic wallet management system 

operates as follows. Each time an electronic wallet device 
is used, the backup condition testing means tests whether 
any of the predefined backup conditions is met. If any 
condition is met, the backup data sending means sends a 

20 predetermined set of backup data. By the backup data 
management means, this backup data is saved into a backup 
database. In this way, the proposed system automatically 
saves backup information when a relevant backup condition 
is met, thus making it possible to promptly reissue an 

25 alternative electronic wallet device when the customer 
lost his/her own device. 

The present invention also provides an electronic 
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wallet device which transfers monetary data. This 
electronic wallet device comprises the following elements: 
backup condition testing means for testing predefined 
backup conditions to determine whether to make a backup, 
5 when the electronic wallet device communicates with any 
other device to transfer monetary data; and backup data 
sending means for sending out a predetermined set of 
backup data collected from the electronic wallet device, 
when the backup condition testing means has determined to 

10 make a backup. 

The proposed electronic wallet device operates as 
follows . Each time a transfer of funds occurs , the backup 
condition testing means tests whether any of the 
predefined backup conditions is met. If any condition is 

15 met, the backup data sending means sends a predetermined 
set of backup data. By storing such backup data, an 
electronic wallet management unit can promptly reissue an 
alternative electronic wallet device when a customer lost 
his/her own electronic wallet device. 

20 Further, the present invention provides an 

electronic wallet management unit which manages an 
electronic wallet device, comprising temporary electronic 
wallet data producing means , responsive to an accident 
report received from a terminal station , for calculating 

25 elapsed time between the last backup operation for an 
issued electronic wallet device and the reception of the 
accident report , compiling temporary electronic wallet 
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data having a limited valid period and a credit limit that 
is determined according to the elapsed time, and sending 
the temporary electronic wallet data back to the terminal 
station. 

5 The proposed electronic wallet management unit 

operates as follows . When an accident report is received 
from a terminal station, the temporary electronic wallet 
data producing means outputs temporary electronic wallet 
data having a limited valid period and a credit limit that 

10 is determined according to the elapsed time since the last 
backup operation. A temporary electronic wallet device 
containing such temporary electronic wallet data can be 
issued to the customer for the sake of his/her convenience, 
with a minimum risk at the issuer side. 

15 In addition, the present invention provides a 

terminal station coupled to an electronic wallet 
management unit. This terminal station comprises the 
following elements : medium storage means for storing a 
plurality of temporary electronic wallet devices in stock 

20 for future issuance; receiving means for receiving the 
accident report concerning an electronic wallet device; 
transmission means for forwarding the received accident 
report to the electronic wallet management unit ; temporary 
electronic wallet data writing means for writing the 

25 temporary electronic wallet data to a memory of one of the 
temporary electronic wallet devices stored in the medium 
storage means, the temporary electronic wallet data being 
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supplied from the electronic wallet management unit in 
response to the forwarded accident report; and temporary 
electronic wallet device releasing means for releasing the 
temporary electronic wallet device containing the 
5 temporary electronic wallet data. 

The proposed terminal station operates as follows. 
When an accident report concerning an electronic wallet 
device arrives at the receiving means, the transmission 
means forwards it to the electronic wallet management unit. 

10 The electronic wallet management unit then supplies 
temporary electronic wallet data. The temporary electronic 
wallet data writing means writes this temporary electronic 
wallet data to a memory of one of the temporary electronic 
wallet devices stored in the medium storage means. Then 

15 the temporary electronic wallet device releasing means 
releases the temporary electronic wallet device containing 
the temporary electronic wallet data. In this way, the 
customer can receive a temporary electronic wallet device 
by entering an accident report to the station, which 

20 eliminates his/her inconvenience for the time being. 

Moreover, the present invention provides a 
computer-readable medium storing an electronic wallet 
management program which manages an electronic wallet 
device holding monetary data. This program causes a 

25 computer to function as: backup condition testing means 
for testing predefined backup conditions to determine 
whether to make a backup, when the electronic wallet 
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device communicates with any other device to transfer 
monetary data; backup data sending means for sending out 
a predetermined set of backup data collected from the 
electronic wallet device, when said backup condition 
5 testing means has determined to make a backup; and backup 
data management means for receiving the backup data from 
said backup data sending means and saving the received 
backup data into a backup database. 

When the stored electronic wallet management 

10 program is executed on a computer, the computer will 
function as: backup condition testing means for testing 
predefined backup conditions to determine whether to make 
a backup, when the electronic wallet device communicates 
with any other device to transfer monetary data; backup 

15 data sending means for sending out a predetermined set of 
backup data collected from the electronic wallet device, 
when said backup condition testing means has determined to 
make a backup; and backup data management means for 
receiving the backup data from said backup data sending 

20 means and saving the received backup data into a backup 
database * 

The above and other objects, features and 
advantages of the present invention will become apparent 
from the following description when taken in conjunction 
2 5 with the accompanying drawings which illustrate preferred 
embodiment of the present invention by way of example. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 shows the principle of the present 
invention; 

FIG. 2 is a block diagram of a system where the 
5 present invention is embodied; 

FIG. 3 is a diagram which shows memory data stored 
in an electronic wallet device; 

FIG. 4 is a diagram which shows the details of 
Last Transaction Log; 
10 FIG. 5 is a diagram which shows the details of 

Backup Data segment; 

FIG. 6 is a diagram which shows an example of 
Backup Target Event Status Word; 

FIG. 7 is a diagram which shows an example of how 
15 a backup transaction status word is obtained; 

FIG. 8 is the first part of a flowchart which 
shows a backup process for an electronic wallet device; 

FIG. 9 is the second part of the same flowchart; 
FIG. 10 is the third part of the same flowchart; 
20 FIG. 11 is the first half of a flowchart showing a 

backup data transmission process; 

FIG. 12 is the second half of the same flowchart; 
FIG. 13 is a diagram which shows how an electronic 
wallet device is reissued; 
25 FIG. 14 is the first part of a flowchart showing a 

process of reporting an accident of an electronic wallet 
and having it reissued; 
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FIG. 15 is a diagram showing an example screen 
shot of reissuance application menu; 

FIG* 16 is a diagram showing an example screen 
shot of a user authentication data entry dialog; 
5 FIG. 17 is the second part of the flowchart 

showing the process of reporting an accident of an 
electronic wallet and having it reissued; 

FIG* 18 is the third part of the same flowchart; 

FIG. 19 is the fourth part of the same flowchart; 
10 FIG. 20 is the first part of a flowchart which 

shows an electronic wallet issuing process; 

FIG. 21 is the second part of the same flowchart; 

FIG. 22 is the third part of the same flowchart; 

FIG. 23 is the fourth part of the same flowchart; 
15 FIG. 24 is a diagram which shows the first half of 

an automatic issuance procedure of a reissued electronic 
wallet device ; and 

FIG. 25 shows the second half of the same 
procedure. 

20 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Several embodiments of the present invention will 
be described below with reference to the accompanying 
drawings . 

2 5 FIG. 1 shows the principle of the present 

invention. This proposed electronic wallet management 
system provides distinctive functions in its electronic 
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wallet device 10, electronic wallet management unit 20, 
and terminal station 30 . 

The electronic wallet device 10 comprises a backup 
condition testing means 11 and a backup data sending means 
5 12. The backup condition testing means 11 tests predefined 
backup conditions to determine whether to make a backup to 
save the current state, when the electronic wallet device 
10 communicates with any other device to transfer monetary 
data for payment or reception of funds . The backup data 
10 sending means 12 outputs a predetermined set of backup 
data out of the electronic wallet device 10 when the 
backup condition testing means 11 has determined to make a 
backup . 

The electronic wallet management unit 20 comprises 
15 a backup data management means 21, a temporary electronic 
wallet data producing means 22, and an electronic wallet 
data producing means 23. The backup data management means 
21 receives the backup data from the backup data sending 
means 12 and saves the received data into its backup 
20 database. The temporary electronic wallet data producing 
means 22 is responsive to an accident report sent from the 
terminal station 30 concerning an electronic wallet device 
that has been issued to a customer. In this event, the 
temporary electronic wallet data producing means 22 
2 5 calculates the elapsed time between the last backup 
operation made for that electronic wallet device and the 
reception of the accident report. The temporary electronic 
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wallet data producing means 22 compiles temporary 
electronic wallet data and sends it to the terminal 
station 30, specifying an appropriate valid period and a 
credit limit depending on the elapsed time. The electronic 
5 wallet data producing means 23 is also responsive to the 
accident report , which produces electronic wallet data by 
collecting data required for the reissuance of the 
electronic wallet device, including the backup data 
maintained in the backup data management means 211 and 

10 other information stored in remote financial institution 
processors 41 and 42. It transfers the produced data to 
the terminal station 30 when a reissuance request is 
received from there. 

What has been referred to as the terminal station 

15 30 is actually an automatic teller machine (ATM) of a 
banking institution, a point-of-sale (POS) terminal, or a 
personal computer. The processing functions of the 
terminal station 30 may be divided into the following two 
groups: those for handling an accident report of an 

20 electronic wallet device, and those for reissuing an 
electronic wallet device. The accident handling functions 
are provided by a medium storage means 31, a receiving 
means 32, a transmission means 33, a temporary electronic 
wallet data writing means 34, and a temporary electronic 

25 wallet device releasing means 35. The medium storage means 
31 stores a plurality of blank temporary electronic wallet 
devices 31a in stock for future issuance. The receiving 
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means 32 receives an accident report about an electronic 
wallet device. The transmission means 33 forwards the 
received accident report to the electronic wallet 
management unit 20. The temporary electronic wallet data 
5 writing means 34 writes temporary electronic wallet data 
to the memory of a new temporary electronic wallet device 
31a stored in the medium storage means 31 . This temporary 
electronic wallet data is supplied from the electronic 
wallet management unit 20 in response to the accident 

10 report. The temporary electronic wallet device releasing 
means 35 releases the temporary electronic wallet device 
31a containing the temporary electronic wallet data. 

The reissuance processing functions, on the other 
hand, are provided by a medium storage means 36 , a 

15 receiving means 37 , a transmission means 38 , an electronic 
wallet data writing means 39, a temporary electronic 
wallet device reclaiming means 30a, and an electronic 
wallet device releasing means 30b. The medium storage 
means 36 stocks a plurality of blank electronic wallet 

20 devices 36a for future issuance. The receiving means 37 
receives a reissuance application for an electronic wallet 
device. The transmission means 38 forwards the received 
reissuance application to the electronic wallet management 
unit 20. The electronic wallet data writing means 39 

25 writes electronic wallet data to the memory of a new 
electronic wallet device 36a stored in the medium storage 
means 36. The electronic wallet data is supplied from the 
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electronic wallet management unit 20 in response to the 
reissuance application. The temporary electronic wallet 
device reclaiming means 30a traps and collects a temporary 
electronic wallet device 31a when it is inserted to the 
5 terminal station 30. The electronic wallet device 
releasing means 30b releases the electronic wallet device 
36a containing the electronic wallet data, after the 
temporary electronic wallet device reclaiming means 30a 
has trapped the temporary electronic wallet device 31a. 

10 The above -described electronic wallet management 

system operates as follows. When a customer transfers 
funds through his/her electronic wallet device 10, the 
backup condition testing means 11 determines whether to 
make a backup. If backup is necessary, the backup data 

15 sending means 12 sends out backup data. This backup data 
is received and maintained by the backup data management 
means 21 in the electronic wallet management unit 20. 

When the electronic wallet device 10 is lost or 
broken down, the customer enters an accident report to the 

20 terminal station 30 to notify the system of the loss or 
failure of his/her electronic wallet device. This accident 
report is accepted at the receiving means 32 and forwarded 
to the electronic wallet management unit 20 through the 
transmission means 33. In the electronic wallet management 

25 unit 20, the temporary electronic wallet data producing 
means 22 produces temporary electronic wallet data on the 
basis of the backup data of the electronic wallet device 
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10 in question, which is maintained in the backup data 
management means 21. The produced data is sent back to the 
terminal station 30. It is received by the temporary 
electronic wallet data writing means 34 in the terminal 
5 station 30. The temporary electronic wallet data writing 
means 34 writes the received data into the memory of a 
temporary electronic wallet device 31a which is stocked in 
the medium storage means 31. After that, the temporary 
electronic wallet device releasing means 35 releases the 

10 temporary electronic wallet device 31a containing the 
temporary electronic wallet data. With this temporary 
electronic wallet device 31a, the customer can enjoy 
electronic money transactions . 

The accident report transmitted by the 

15 transmission means 33 would also reach the electronic 
wallet data producing means . This report causes the 
electronic wallet data producing means to collect data 
necessary for compiling electronic wallet data for the 
purpose of reissuance. 

20 The customer files a reissuance application 

through the terminal station 30 after a prescribed time 
has elapsed since the accident report was submitted. This 
reissuance application is received at the receiving means 
37 and forwarded to the electronic wallet management unit 

25 20 through the transmission means 38. In the electronic 
wallet management unit 20, the electronic wallet data 
producing means 23 responds to the reissuance application 
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by sending out the electronic wallet data which has 
already been prepared. This electronic wallet data reaches 
the electronic wallet data writing means 39, where it is 
written into the memory of an electronic wallet device 36a 
5 stocked in the medium storage means 36. The customer then 
inserts his/her temporary electronic wallet device 31a to 
the terminal station 30. The inserted wallet device 31a is 
trapped and collected by the temporary electronic wallet 
device reclaiming means 30a. In exchange for this, the 

10 electronic wallet device releasing means 30b releases the 
electronic wallet device 36a containing the electronic 
wallet data, and the customer receives the reissued 
electronic wallet device 36a. 

As described above, the proposed system is 

15 designed to make a data backup when the customer uses 
his/her electronic wallet device 10. This automated backup 
mechanism enables quick reissuance of an electronic wallet 
device. Further, the proposed system offers a temporary 
electronic wallet device to meet an immediate demand of 

20 the customer, until an official version of electronic 
wallet device can be issued. This temporary measure will 
minimize the inconvenience to the customer. 

FIG. 2 is a block diagram of a system where the 
present invention is embodied. The electronic wallet 

2 5 management system of the present invention comprises an 
electronic wallet management unit 50 and a plurality of 
financial institution processors 60 and 70, which play a 
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central role in the system. The electronic wallet 
management unit 50 and the financial institution 
processors 60 and 70 are interconnected via a network. 

The electronic wallet management unit 50 comprises 
5 an electronic wallet database 51, a financial institution 
database 52, and a temporary electronic wallet issuance 
database 53. The electronic wallet database 51 stores 
backup data and other information downloaded from 
electronic wallet devices. The financial institution 
10 database 52 stores information about the financial 
institution processors on the network. The temporary 
electronic wallet issuance database 53 maintains data 
about temporary electronic wallet devices that have been 
issued. 

15 The financial institution processor 60 comprises 

an account management database 61, an electronic wallet 
device manager 62, and a temporary electronic wallet 
device database 63. Likewise, the other financial 

institution processor 70 comprises an account management 

20 database 71, an electronic wallet device manager 72, and a 
temporary electronic wallet device database 73. The 
account management databases 61 and 71 store account 
parameters, such as the amount of each customer's deposit. 
The electronic wallet device managers 62 and 72 store 

25 information about electronic wallet devices issued by the 
financial institutions that they are serving. The 
temporary electronic wallet device databases 63 and 73 



-17- 



store information about temporary electronic wallet 
devices issued by the financial institutions that they are 
serving. 

A master electronic wallet device 81, a point -of- 
5 sale (POS) terminal 82, and a personal computer 83 are 
linked to the electronic wallet management unit 50 via its 
local network. Automatic teller machines (ATM) 85 and 87 
are linked to the financial institution processors 60 and 
70, respectively, via their local networks. A personal 

10 computer 88 is also linked to the financial institution 
processor 70. Further, an ATM 84 and a personal computer 
86 are connected directly to the network. The above ATMs 
and personal computers are each equipped with an interface 
to slave electronic wallet devices 91 to 98, which are 

15 implemented in the form of IC cards. Essentially, those 
slave electronic wallet devices 91 to 98 are computer 
subsystems each comprising a processor and memory 
components. The ATMs 84, 85, and 87 keep blank electronic 
wallet devices in stock, which contain no monetary data in 

20 their memory. These blank devices are for future use in 
issuing a temporary electronic wallet device. When so 
requested, the ATM 84, 85, and 87 writes appropriate data 
into a blank device and outputs it as a temporary 
electronic wallet device. 

25 The above electronic wallet management system is 

intended for transfer of monetary data with electronic 
wallet devices. For this purpose, electronic wallet 
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devices have to carry some necessary data as will be 
described below. 

FIG . 3 shows memory data stored in an electronic 
wallet device . 

5 The "Common Control" segment contains basic 

control parameters necessary for the electronic wallet 
device to operate. More specifically, this segment holds 
memory addresses of various data segments and sub-segments 
described below. 

10 The "Electronic Wallet Management Data" segment 

has the following information fields: "Electronic Wallet 
ID" (Issuance No.), "Date of Issue," "Valid Period," 
"Issuer Name," "Issuer Code," "Password," "Type of 
Electronic Wallet," "Date and Time of Last Transaction," 

15 and "Last Transaction Log." The Electronic Wallet ID field 
contains an identification code that is assigned to each 
electronic wallet device when it is issued. The Date of 
Issue field indicates when that electronic wallet device 
was issued. The Issuer Name field shows the name of the 

20 establishment that issued the electronic wallet device. 
The Issuer Code field contains the identification code of 
the issuer. The Password field contains a special 
character string that only the owner of the electronic 
wallet device knows for use in authenticating the user of 

25 the electronic wallet device. The Type of Electronic 
Wallet field indicates the current operation mode and I/O 
mode being set to the electronic wallet. While electronic 
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wallet systems are designed for electronic cash 
transactions and settlement account (checks and bills) 
transactions, each individual electronic wallet device may 
be restricted to either of those two kinds of transactions, 
5 or can handle both kinds of transactions, depending on its 
current operation mode setup. The I/O mode determines 
whether to enable input/output functions. The Date and 
Time of Last Transaction field indicates the date and time 
of the most recently conducted transaction, including 

10 inquiry, and the Last Transaction Log field holds a log 
record of that transaction. The details of Last 

Transaction Log will be provided later. 

The "User Management Data" segment is divided into 
the following three sub-segments: "Private Data," "User 

15 Authentication Data," and "Network Management Data." More 
specifically, the Private Data sub -segment contains the 
owner's private information, including his/her name, sex, 
and address. The User Authentication Data sub-segment 
contains digital signature or like information. The 

20 Network Management Data sub- segment contains network 
address information and the owner's identification code. 

The "Backup Data" segment is divided into two sub- 
segments: "Backup Condition Data" and "Backup History 

Data." The Backup Condition Data sub-segment contains 

2 5 information about on what conditions a data backup process 
should be invoked. The Backup History Data sub -segment 
contains history records describing some data backup 
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operations that were conducted in the past. The specifics 
of these two sub- segments will be provided in a later 
section. 

The "Reissue Data" segment stores the following 
5 data fields: "Reissuance Count," "Date of Last Loss 
Report," "Place of Loss Report," "Date of Last Reissue," 
Date of First Reissue," and "Place of Reissue (ATM)." The 
Reissuance Count field is used as a counter that is to be 
incremented by one each time the electronic wallet is 

10 reissued. The Date of Last Loss Report and Place of Loss 
Report fields indicate when and where the last loss report 
was submitted, respectively. The Date of Last Reissue 
field records when the electronic wallet device was 
reissued last time. The Date of First Reissue field 

15 records when was the first time that the electronic wallet 
device was reissued. The Place of Reissue (ATM) field 
indicates where (or at which ATM) the reissuance was made 
last time. 

The "Transaction Management Data" segment is 
20 divided into the following parts: "Transaction Management" 
sub-segment, "Authentication Center Data," "Transaction 
Management Center Data," "Financial Institution Data," 
"Credit Card Company Data," and "House Card Company Data." 
The Transaction Management sub -segment contains the memory 
25 addresses of various information resources necessary for 
transaction management. The Authentication Center Data 
field contains the name and identification code of an 
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authentication center. The Transaction Management Center 
Data field contains the name and identification code of a 
transaction management center. The Financial Institution 
Data field contains the name and identification code of a 
5 financial institution. The Credit Company Data field 
contains the name and identification code of a credit 
company. The House Card Company Data field contains the 
name and identification code of a house card company. 

The "Money Management Data" segment is used in 

10 electronic money transactions, which comprises "Money 
Control" and "Money Management" sub-segments . The Money 
Management sub- segment contains information such as the 
present date and sub-passwords. The Money Management sub- 
segment shows the current balance of the electronic money 

15 account, as well as containing some criteria to be 
considered in payment transactions (e.g., whether to 
perform user authentication) . 

The "Check/Bill Management Data" segment comprises 
the following sub-segments: "Check/Bill Control," "Owner's 

20 Check Management," and "Received Check Management." The 
Check/Bill Control sub-segment contains the memory 
addresses of various information resources necessary for 
managing checks and bills. The Owner's Check Management 
sub-segment contains the name of a financial institution 

25 where the owner has his/her checking account, as well as 
the credit limit given to the owner. The Received Check 
Management sub- segment contains information about received 
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checks, including the name of the financial institution 
that issued each check and the face value of that check. 

FIG. 4 shows the details of the Last Transaction 
Log. This data block maintains records of two kinds of 
5 transactions which caused information updates. One is 
online transactions through an electronic wallet 
management unit. The other is offline transactions without 
using an electronic wallet management unit. To say a 
transaction is "online" is to say the electronic wallet 

10 device is coupled to an electronic wallet management unit 
during that transaction. The term "offline" means the 
opposite situation. Even when it has a link to other 
networks or processor, the electronic wallet is said to be 
offline if there is no connection to a relevant electronic 

15 wallet management unit. 

The Last Transaction Log contains the following 
data fields. The "Date and Time of Last Online 

Transaction" field indicates when the last transaction was 
made through an electronic wallet management unit . This 

20 field is updated each time a transaction is successfully 
completed, which is signaled as a positive acknowledgment 
sent from the other party being involved. The recorded 
date and time is used, together with a predetermined 
backup interval, to determine when to perform a backup 

25 operation. It is also used in transmitting a timestamp as 
one of the security measures such as data encryption to 
protect against eavesdropping of messages . 
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The "Date and Time of Last Offline Transmission" 
field records when the last offline transaction was made 
without using an electronic wallet management unit. This 
field data is updated in response to an acknowledgment 
5 indicating that the offline transaction has been 
successfully completed, as well as being sent to the 
remote party as part of a transaction log, together with 
the monetary data being transferred thereto. 

As described above, the date and time of the last 

10 online transaction is recorded separately from that of the 
last offline transaction. Because of these two independent 
fields, the history of both online and offline 
transactions can be managed more precisely. Further, the 
data backup function can be triggered at predetermined 

15 intervals in the case of online transactions. 

The "Transaction Counter" field is divided into 
two subfields: online transaction counter and offline 
transaction counter. The online transaction counter is 
incremented by one each time an online transaction is 

20 completed. Likewise, the offline transaction counter is 
incremented each time an offline transaction is completed. 
The online transaction counter is used to determine 
whether to perform a backup operation according to a 
predetermined backup interval. The online transaction 

25 counter is also sent to a relevant electronic wallet 
management unit as one of the security measures. The 
electronic wallet management unit compares the value of 
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this counter with its local record relevant to the 
electronic wallet device of interest, thereby protecting 



transaction counter is transferred to the remote party as 
5 part of a transaction record, along with the monetary data. 
The transaction counters are reset to zero each time a 
backup process is executed. 

The "Transaction Interface" field is actually 
divided into two subfields: online transaction interface 

10 and offline transaction interface. The online transaction 
interface refers to what kind of equipment (e.g., personal 
computer, POS, ATM) was used in the last online 
transaction. The offline transaction interface, on the 
other hand, refers to what kind of equipment (e.g., 

15 personal computer, POS, electronic wallet device) was used 
in the last offline transaction. As such, the Transaction 
Interface field shows the equipment used in the last 
transaction. 

The "Transaction Status Word" field contains a 
20 plurality of flag bits corresponding to different 
transaction types. Each time a transaction is completed, a 
corresponding flag bit is set to one, or "ON," to record 
what kind of transaction it was . When a data backup 
operation is performed, all the flag bits are reset to 
25 zeros, or "OFF." 

The above mechanism of the Transaction Status Word 
field makes it possible to identify what kinds of 



the system against fraudulent messages. 
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transactions have been conducted since the last backup. 
This status word is tested at the time of a scheduled 
regular backup operation to determine what data should be 
backed up. That is, the system calculates a logical 
5 product of the Transaction Status Word and Backup Target 
Event Status Word (a piece of information in the Backup 
Condition Data sub-segment), and based on the resultant 
flag bits, it compiles backup data by extracting necessary 
data blocks whose corresponding flag bits are being set to 
10 "ON." 

The "Transaction Type" field records what kind of 
transaction was made in the last online or offline 
transaction. More specifically, the record maintains 
transaction class and transaction mode. The transaction 

15 class subfield indicates which instrument was used in the 
transaction. Electronic money transactions, for example, 
should be distinguished from credit card transactions . The 
transaction mode subfield shows what specific processing 
operation (e.g., bill payment, fund transfer) was 

20 performed in the last transaction. 

FIG. 5 shows the details of the backup data 

segment . 

The Backup Condition Data segment contains the 
following data elements: 
25 • Backup Type 

• Backup Interval Parameters 

• Destination Account Information 
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• Source Account Information 

• Paid Amount Data 

• Received Amount Data 

• Backup Transaction Status Word 

5 The Backup Type specifies when to make a backup of 

transaction data. More specifically, there are four 
options as follows. A first option is to make a back up 
when the system has conducted such a payment transaction 
whose destination account or payment purpose agrees with a 

10 prescribed destination or purpose. A second option is to 
make a back up every time a predetermined number of 
transactions are finished ("once every n transactions"). A 
third option is to make a backup at predetermined 
intervals ("once every n days/hours"). A fourth option is 

15 to make a back when any of the above three occasions is 
encountered . 

The Backup Interval Parameters provide a specific 
backup interval setup depending on the Backup Type. In the 
case of "once every n transactions" mode, the number of 

20 transactions (or the number of transfers) is set as a 
parameter. In the case of "once every n days /hours" mode, 
the interval is designated by a combination of month, week, 
and day, or defined in units of hour. To enable these two 
kinds of setups simultaneously, one should define both 

25 parameters, i.e.. Number of Transfers and Time Interval. 

The "Destination Profile" field contains 
information about the destination account or payment 
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purpose to be referenced as a trigger condition of backup 
operations. The system will invoke its backup process 
every time the owner of an electronic wallet device makes 
a payment to the specified destination account or for the 
5 specified payment purpose. 

The "Source Profile" field contains information 
about the source account to be referenced as a trigger 
condition of backup operations. The system will invoke its 
backup process every time the wallet owner makes a payment 

10 using the specified source account. 

The "Paid Amount Data" field is used to set the 
amount of money which is referenced in payment 
transactions as a trigger condition of backup operations . 
The system will invoke its backup process every time the 

15 wallet owner makes a payment that exceeds the critical 
amount specified in this field. 

The "Received Amount Data" field is used to set 
the amount of received money which is referenced as a 
trigger condition of backup operations. The system will 

20 invoke its backup process every time the wallet owner 
receives funds exceeding the critical amount specified in 
this field. 

The "Backup Target Event Status Word" consists of 
a plurality of flag bits corresponding to various 
25 transaction types. When a specific flag bit is set to one, 
it means that any updates made to the corresponding 
transaction are subject to backup. That is, the system 
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will save the data related to such a transaction, if any 
changes have happened to that data* 

FIG. 6 shows an example of the Backup Target Event 
Status Word, which consists of eight flag bits entitled as 
5 follows (from the right hand of FIG. 6): 

• Change in User Authentication Data 

• Change in Authentication Center Data 

• Change in Transaction Management Center Data 

• Change in Financial Institution Data 
10 • Change in Credit Company Data 

• Change in House Card Company Data 

• Change in Money Management Data 

• Change in Check/Bill Management Data 

When making a backup, the system compiles backup data by 
15 collecting relevant data blocks from the data segments 

whose corresponding flag bits are being set to one. 

Referring back to FIG. 5, the Backup History Data 

sub-segment comprises the following two sections: "Last 

Backup Management Data" and "Previous Backup Management 
20 Data." 

The Last Backup Management Data section contains 
the following data fields: 

• Date and Time of Last Backup 

• Transaction Counter at Last Backup 
25 • Interface Used at Last Backup 

• Place of Last Backup 

• Last Backup Transaction Status Word 
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The Date and Time of Last Backup field indicates when the 
system made a data backup last time. The Transaction 
Counter at Last Backup field stores the transaction 
counter value which was sampled from the Last Transaction 
5 Log at the time of the last backup operation. The 
Interface Used in Last Backup field shows which equipment 
was used in the last backup operation. The Place of Last 
Backup field indicates where the last backup operation was 
conducted. The Last Backup Transaction Status Word 
10 preserves the backup transaction status . word at the time 
of the last backup operation. 

The Previous Backup Management Data section 
contains the following data fields: 

• Date and Time of Previous Backup 

15 • Transaction Counter at Previous Backup 

• Interface Used in Previous Backup 

• Place of Previous Backup 

• Previous Backup Transaction Status Word 

The Date and Time of Previous Backup field indicates when 
20 was the last backup but one. The Transaction Counter at 
Previous Backup field stores the transaction counter value 
which was sampled from the Last Transaction Log at the 
time of the last backup but one. The Interface Used in 
Previous Backup field shows which equipment was used in 
25 the last backup but one. The Place of Previous Backup 
field indicates where the backup operation was conducted 
last time but one. The Previous Backup Transaction Status 
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Word preserves the Backup Transaction Status Word at the 
time of the last backup but one. 

FIG. 7 shows an example of how a backup 
transaction status word is obtained. When a backup process 
5 is invoked, the system calculates a logical product (AND) 
of the transaction status word 101 at that point in time 
and the Backup Target Event Status Word 102. If those two 
status words have any common flag bits being set to ON, 
then the system will yield the resultant backup 
10 transaction status word 103 with the corresponding bits 
set. That is, a specific data segment will be backed up if 
it is previously designated as a backup source, and only 
if that data segment has been updated since the last 
backup session. 

15 The above mechanism eliminates unnecessary data 

segments from the list of backup sources. Further, it is 
possible to quickly collect and compile backup data since 
the sources can be reached by using indexes. 

The electronic wallet management system configured 

20 as above is designed to perform various processing 
operations. The specifics will be explained below. 

FIG. 8 is the first part of a flowchart which 
shows a backup process for an electronic wallet device. 
Suppose that a user has inserted his/her electronic wallet 

25 device into a terminal station (e.g., ATM) in an attempt 
to initiate a certain financial operation, where the 
terminal station is linked to the electronic wallet 



-31- 



management unit 50 via a network. In this context, the 
following processing steps are executed by the electronic 
wallet device being inserted to the terminal station. 

(51) The electronic wallet device waits for the user 
5 to enter a service command. 

(52) The device determines whether the entered 
command invokes any transfer of monetary data. If so, 
the process advances to step S5. If not, the process 
branches to step S3. 

10 (S3) The device determines whether the entered 

command is a mandatory backup request. Here, the 
term "mandatory backup request" denotes that the 
owner of the electronic wallet device is requesting 
a backup operation. If it is a mandatory backup 

15 request, the process advances to step S4 . If not, 

the present process is terminated. 

(54) The device exits from the current process after 
calling a backup data transmission routine. 

(55) The device determines whether the entered 
20 command is intended for a payment of money. If so, 

the process advances to step S6. If not, the process 
branches to step 821 (see FIG. 10). 

(56) The device executes a payment process. 

(57) The device determines whether the payment has 
25 successfully finished. If the payment was successful, 

the process advances to step S9. If it was not 
successful, the process proceeds to step S8 . 
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(38) The device exits from the current process after 

executing an error handling routine. 
(S9) The device updates the count of money transfer 

operations. That is, it increments the Online 
5 Transaction Counter by one. 

(510) The device determines whether any specific 
condition is set in the Backup Condition Data sub- 
segment. If so, the process advances to step Sll 
(see FIG. 9). If not, the process is terminated. 

10 FIG. 9 is the second part of the flowchart of the 

backup process. 

(511) The device determines whether any specific 
condition is set in the Number of Transfers field. 
More specifically, this condition is used when the 

15 Backup Type is set to either of the following two 

modes: once every n transactions; and at the 
earliest occasion of "once every n transactions" and 
"once every n days/hours." If this is the case, a 
critical value of "Number of Transfers" must be set 

20 in the Backup Interval Parameters section. The 

process advances to step S12 if any specific 
condition is set in that data field. If not, the 
process proceeds to step S13. 

(512) The device determines whether the online 
25 transaction counter is equal to or greater than the 

current backup interval setting (i.e.. Number of 
Transfers). If so, the process branches to step S20. 
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If not, the process advances to step S13, 

(513) The device determines whether any specific 
condition is set in the Time Interval field. More 
specifically, this condition is used when the Backup 

5 Type is set to either of the following two modes : 

once every n days /hours; and at the earliest 
occasion of "once every n transactions" and "once 
every n days/hours." If any specific condition is 
set in that Time Interval field, the process 
10 advances to step S14. If not, the process proceeds 

to step S16. 

(514) The device calculates the difference between the 
present time and the date and time of the last 
backup operation, thereby obtaining the elapsed time 

15 since the last backup. 

(515) The device determines whether the time 
calculated at step SI 4 is equal to or greater than 
the Time Interval parameter that has previously been 
defined as a backup condition. If so, the process 

20 branches to step S20. Otherwise, the process 

proceeds to step S16. 

(516) The device determines whether any specific 
destination account or payment purpose is designated 
as a backup condition. If there is such a condition, 

25 the process advances to step S17. If not, the 

process proceeds to step S18. 

(517) The device determines whether the designated 
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destination account or payment purpose agrees with 
what is set in the Destination Profile field that 
has been defined as a backup condition. If so, the 
process advances to step S20. If not, the process 
5 returns to step S18. 

(S18) The device determines whether any specific 
condition is set in the Paid Amount Data field. If 
there is such a condition, the process advances to 
step S19. If not, the process is terminated. 
10 (S19) The device determines whether the amount of the 
money paid this time is equal to or greater than 
what is set as a backup condition in the Paid Amount 
Data field. If so, the process advances to step S20. 
If not, the process is terminated. 
15 (S20) The device calls up a backup data transmission 
routine and then exits from the current process. 

FIG. 10 is the third part of the same flowchart of 
the backup process. 

(S21) The device receives monetary data. 
20 (522) The device determines whether the reception 
process has finished successfully. If so, the 
process advances to step S24. If not, the process 
branches to step S23. 

(523) The device exits from the current process after 
25 executing an error handling routine. 

(524) The device determines whether any specific 
condition is set in the Backup Condition Data sub- 
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segment. If there is such a condition, the process 
advances to step S25. If not, the process is 
terminated. 

(525) The device determines whether any specific 
5 condition is set in the Source Profile field. If 

there is such a condition, the process advances to 
step S26. If not, the process proceeds to step S27. 

(526) The device determines whether the information 
about the source account of the present transaction 

10 agrees with what is set as a backup condition in the 

Source Profile field. If so, the process advances to 
step S29. If not, the process proceeds to step S27. 
{S27) The device determines whether any specific 
condition is set in the Received Amount Data field. 

15 If there is such a condition, the process advances 

to step S28. If not, the process is terminated. 

(528) The device determines whether the amount of the 
received money is equal to or greater than what is 
set as a backup condition in the Received Amount 

20 Data field. If so, the process advances to step S29. 

If not, the process is terminated. 

(529) The device calls a backup data transmission 
routine . 

FIG. 11 is the first half of a flowchart showing 
25 the backup data transmission process. 

(S41) The electronic wallet device determines whether 
the device itself has already been linked with the 
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electronic wallet management unit. If so, the 
process skips to step S44. If not, the process 
proceeds to step S42. 

(542) The device starts to connect itself with the 
5 electronic wallet management unit . 

(543) The device determines whether it has 
successfully established a link with the electronic 
wallet management unit. If so, the process advances 
to step S44. If not, the process branches to step 

10 S52 (FIG. 12). 

(544) The device compiles backup data by collecting 
data blocks that have to be backed up. 

(545) The device determines whether it is necessary to 
encrypt the backup data. If it is necessary, the 

15 process advances to step S46. If not, the process 

skips to step S47. 

(546) The device encrypts the backup data. 

(547) The device transmits the backup data. 

FIG. 12 is the second half of the same flowchart. 
20 (S48) The device determines whether the data 
transmission has successfully finished. If so, the 
process advances to step S53. If not, the process 
branches to step S49. 
(849) The device determines whether it can recover 
25 from the error by retrying the data transmission. If 

it can, the process advances to step S50. If not, 
the process skips to step S52. 
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(550) The device increments its retry counter by one. 

(551) The device determines whether the retry counter 
value is equal to or smaller than a maximum retry 
count, which has previously been set to the 

5 electronic wallet device itself or to a terminal 

station such as ATM. If the above is true, the 
process returns to step S47 (FIG. 11). Otherwise, 
the process advances to step S52. 

(552) The device displays an error message on a 
10 monitor screen to indicate that the backup operation 

has been aborted unsuccessfully. 

(553) The device overwrites the Previous Backup 
Management Data section by transferring data from 
the Last Backup Management Data section. 

15 (554) The device updates the Last Backup Management 
Data section, so that it will describe how the 
backup operation has been made this time. 
(S55) The device clears the Transaction Status Word in 
the Last Transaction Log. 
20 (S56) The device displays a notification message on 
the monitor screen to indicate that the backup 
operation has finished successfully. The process is 
now terminated accordingly. 

Through the above processing steps, the electronic 
25 wallet device sends a copy of its memory content to the 
electronic wallet management unit , and the backup copy is 
maintained in the management unit. This operation is 
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performed fully automatically, without requiring the owner 
of the device to give any explicit instructions to the 
system. 

Although an electronic wallet device can possibly 
5 be lost or broken down, the backup copy of its memory data 
permits the electronic wallet management unit to restore 
the original electronic wallet data therefrom. This means 
that the owner can get his/her electronic wallet device 
reissued quickly. The reissuance of electronic wallet 

10 devices, however, may require a few days to finish 
necessary paperwork and other routine tasks. It would 
therefore be beneficial to customers if the system could 
reissue an electronic wallet device for temporary use 
immediately when they submitted a loss report about their 

15 own electronic wallet devices. 

FIG. 13 shows how the proposed system reissues an 
electronic wallet device. This figure is divided into four 
sections to illustrate what processing steps are executed 
in an ATM, an electronic wallet management unit, an 

20 issuing bank processor, and a correspondent bank processor. 

(5101) The ATM receives a report describing a loss or 
failure of an electronic wallet device, together 
with the customer's authentication data (password). 
Those two pieces of information are then sent to the 

25 electronic wallet management unit via a network. 

(5102) The electronic wallet management unit 
authenticates the customer, as well as identifying 
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the issuing bank and its correspondent bank. It then 
forwards the loss report and user authentication 
data to the issuing bank processor. 

(S103) The issuing bank processor authenticates the 
5 customer and holds back his/her accounts. Here, 

holding back an account means disabling any fund 
withdrawal from that account, except for direct 
debit. The issuing bank processor also informs its 
correspondent bank of the loss of the customer's 
10 electronic wallet device, 

{S104) The correspondent bank processor holds back the 
account of the customer (i.e., the loser), and so 
notifies the issuing bank processor. 

(8105) The issuing bank processor informs the 
15 electronic wallet management unit that the 

customer's accounts are now being held back. 

(5106) The electronic wallet management unit requests 
the ATM to interact with the customer to determine 
what kind of device should be used as an electronic 

20 wallet medium. Temporary electronic wallet devices 

may be provided in the form of small IC card type 
devices, or such electronic wallet devices that have 
network interface capabilities. 

(5107) The ATM displays a selection dialog prompting 
25 the customer to choose which medium should be used 

for a temporary electronic wallet device that he/she 
will receive. Receiving an input from the customer. 
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the ATM notifies the electronic wallet management 
unit of the customer's choice, 
(S108) The electronic wallet management unit transmits 
a reissuance request to the issuing bank. 
5 (S109) The issuing bank processor issues a temporary 
electronic wallet device. More specifically, the 
process includes the following tasks: setting up a 
temporary electronic wallet account, compiling 
temporary electronic wallet data, and creating a 
10 password for the temporary electronic wallet device. 

(5110) In its temporary electronic wallet issuance 
database, the electronic wallet management unit 
saves a record about the new temporary electronic 
wallet to be issued, the result of which is then 

15 sent to the ATM. 

(5111) The ATM issues the temporary electronic wallet 
device . 

Through the above processing steps, a temporary 
electronic wallet device is issued. This is followed by 
20 another process which reissues officially the lost or 
failed electronic wallet device. 

(5112) The electronic wallet management unit transmits 
an electronic wallet reissuance request to the 
issuing bank processor. 

25 (3113) The issuing bank processor collects the latest 
electronic wallet data related to the customer in 
question. In addition to searching its own local 
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account database, the issuing bank processor 
communicates with the correspondent bank processor 
through sending a data collection request. 

(5114) Receiving the data collection request, the 
5 correspondent bank processor collects information 

relevant to the customer's electronic wallet and 
sends the result back to the issuing bank processor. 

(5115) The issuing bank processor supplies the 
electronic wallet management unit with the collected 

10 data. 

(5116) Based on the latest electronic wallet data 
collected in this way, the electronic wallet 
management unit creates a new set of electronic 
wallet device data and saves it into the electronic 

15 wallet database. The electronic wallet management 

unit then requests the issuing bank processor to 
update its database, and it then commands the 
reissuance of an electronic wallet device. 

(5117) The issuing bank processor records the 
20 information about the reissued electronic wallet 

device into its electronic wallet device manager and 
closes the temporary electronic wallet account . At 
the same time, it releases the customer's account 
from the hold back state, as well as sending an 
25 account release request to the correspondent bank. 

(5118) The correspondent bank releases the customer's 
account from the hold back state. 
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(5119) The ATM asks the electronic wallet management 
unit to transfer the reissued electronic wallet 
device so that the customer can receive it. 

(5120) Upon receipt of the request, the electronic 
5 wallet management unit supplies the ATM with data 

that is to be stored in the memory of an electronic 
wallet device to be physically reissued. 

(5121) Receiving the data from the electronic wallet 
management unit , the ATM writes it into the memory 

10 of the previously selected medium, thereby creating 

a new electronic wallet device. The ATM then issues 
this device to the requesting customer in exchange 
for the temporary electronic wallet device that 
he/she has. 

15 In this way the proposed system immediately 

provides a temporary electronic wallet device in order to 
help the customer when his/her electronic wallet device is 
lost or broken down. Because the stored backup copy is 
relatively fresh, the proposed system can reissue an 

20 electronic wallet device in a prompt manner. 

The details of the aforementioned reissuance 
application process and subsequent electronic wallet 
reissuing process will now be described below. The 
following section, however, will focus on the processing 

25 at the ATM and electronic wallet management unit. 
Processes to be executed at the issuing bank processor and 
the like (e.g., holing back an account) will not be 
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explained here. It is also assumed that there is only one 
type of electronic wallet medium available, which 
eliminates the need for choosing a medium. 

First, the reissuance application process will be 
5 described in detail below. This process is invoked when a 
customer who lost his/her electronic wallet device enters 
a command to an ATM to request its reissuance. In response 
to the command, the ATM displays a reissuance application 
menu on its monitor screen. 
10 FIG. 14 is the first part of a flowchart showing a 

process in which the customer reports an accident happened 
to his/her electronic wallet, as well as making an 
application of its reissuance. 

(S201) The ATM displays a reissuance application menu 
15 on its monitor screen and receives a command 

selected by the customer. 

FIG. 15 is a diagram showing an example screen 
shot of the reissuance application menu. This 
reissuance application menu 110 is composed of two 
20 parts entitled "Submit Electronic Wallet Accident 

Report" and "Receive Electronic Wallet." The menu 
provides some on-screen buttons for individual 
selection items. 

Under the title of "Submit Electronic Wallet 
25 Accident Report," the following three buttons are 

available: "Lost" button 111, "Failed" button 112, 
and "No Temporary Wallet Required" button 113. The 
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customer presses the Lost button 111 when his/her 
electronic wallet device is lost. He/she presses the 
Failed button 112 when his/her electronic wallet 
device becomes inoperative. Or the customer may 
5 presses the No Temporary Wallet Required button 113 

when his/her electronic wallet is lost or inoperable 
but he/she does not need a temporary electronic 
wallet . 

Under the title of "Receive Electronic Wallet," 
10 on the other hand, a "With Temporary Electronic 

Wallet" button 114 and a "Without Temporary 
Electronic Wallet" button 115 are provided. The 
customer presses the button 114 when he/she wishes 
to have his/her lost electronic wallet reissued, in 
15 addition to receiving a temporary electronic wallet 

device. He/she may press the other button 115, 
wishing the reissuance, but without receiving a 
temporary electronic wallet device. 

Pressing any of the above buttons in the 
20 reissuance application menu will causes the present 

processing to execute step S202 and subsequent steps 
(FIG. 14). 

(S202) The ATM determines whether the customer is 
submitting an accident report. If so, the process 
25 advances to step S203. Otherwise, it is interpreted 

that the customer wishes to receive a reissued 
electronic wallet, and therefore the process 
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branches to step S223 (FIG. 18). 

(5203) The ATM determines whether the accident report 
is actually a loss report. If so, the process 
advances to step S210. If not, the process proceeds 

5 to step S204, since it implies that the accident 

report indicates device failure. 

(5204) The customer inserts his/her failed electronic 
wallet device to the ATM. 

(8205) The ATM attempts to read and write the inserted 
10 electronic wallet device for testing purposes. 

(S206) The ATM checks whether the result of the above 
access test suggests that the device is operable. If 
so, the process proceeds to step S207. If not, the 
process advances to step S209. 
15 (S207) The ATM displays a message on its monitor screen 
to indicate that the electronic wallet device is 
normal . 

(8208) The ATM ejects the inserted electronic wallet 

device and terminates the current process. 
20 (S209) The ATM traps the inserted electronic wallet 

device for reclaiming. 
(S210) The ATM displays a dialog on its monitor screen 

to prompt the customer to enter his/her 

authentication data . 
2 5 FIG. 16 is a diagram showing an example screen 

shot of this user authentication data entry dialog. 

This dialog 120 has the following three elements: a 
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first text box 121 for entering a password; a second 
text box 122 for entering the customer's name; and a 
third text box 123 for entering his/her contact 
address information. 
5 (S211) The customer enters his/her user authentication 
data (e.g. , his/her account number and password) to 
each text box 121 to 123. 

FIG. 17 is the second part of the flowchart 
showing the same process. 
10 (S212) The ATM determines whether it is unnecessary to 
issue a temporary electronic wallet device, based on 
what the customer selected from the reissuance 
application menu. If the customer does not need a 
temporary electronic wallet, the process advances to 
15 step S213. Otherwise, the process goes to step S214. 

(S213) The ATM sends the user authentication data and 
reissuance application data to the electronic wallet 
management unit . The process then proceeds to step 
S216. 

20 (S214) The customer enters his/her user authentication 
data for the forthcoming temporary electronic wallet 
device . 

(5215) The ATM transmits the user authentication data, 
reissuance application data, and temporary 

25 electronic wallet device issuance request to the 

electronic wallet management unit . 

(5216) The ATM receives a message that the electronic 
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wallet management unit sends in response to the 
customer's reissuance application. In the case that 
the submitted application included a request for a 
temporary electronic wallet device, the response 
5 message is accompanied by a data set that should be 

written into the memory of the temporary electronic 
wallet device to be issued. 
(S217) The ATM determines whether the reissuance 
application has been accepted correctly by the 

10 electronic wallet management unit. If so, the 

process advances to step S219. If not, the process 
branches to step S218. 
(3218) The ATM displays error status information on its 
monitor screen and exits from the current process. 

15 (5219) The ATM displays a message to indicate that the 
reissuance request has been accepted successfully by 
the electronic wallet management unit . 

(5220) The ATM determines whether it is unnecessary to 
issue a temporary electronic wallet device. The 

20 process is terminated if no temporary electronic 

wallet device is necessary. Otherwise, the process 
advances to step S221. 

(5221) The ATM produces a temporary electronic wallet 
device. More specifically, it writes the valid 

25 period, user authentication data, credit limit, and 

other various data elements into the memory of an 
electronic wallet medium stocked in the ATM. 
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{S222) The ATM ejects the produced temporary electronic 
wallet device and exits from the process* 

FIG. 18 is the third part of the same flowchart. 

(5223) The ATM determines whether the customer has 
5 already received a temporary electronic wallet 

device. Actually, this is determined by identifying 
which button the customer has pressed, the upper 
button 114 or the lower button 115. The former 
button implies that a temporary wallet was issued, 
10 while the latter button means no temporary wallet 

was issued. If the customer has a temporary wallet, 
the process goes to step S230 (FIG. 19). Otherwise, 
the process advances to S224. 

(5224) The customer enters his/her user authentication 
15 data of the lost electronic wallet device. 

(5225) The customer enters his/her user authentication 
data for a new electronic wallet device to be 
reissued. 

(5226) The ATM transmits the reissuance application 
20 data to the electronic wallet management unit, 

together with the above two sets of user 
authentication data entered by the customer. If this 
data transfer is successfully finished, the 
electronic wallet management unit returns a data set 
2 5 that should be written into the memory of a new 

electronic wallet device to be reissued. 
(S22 7) The ATM determines whether the data transfer was 
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successful. If so, the process branches to step S240 
(FIG. 19). If not, the process proceeds to step S228. 

(5228) The ATM determines whether the error information 
suggests that the system has already issued a 

5 temporary electronic wallet device to the customer. 

If so, the process advances to step S230. If not, 
the process proceeds to step S229. 

(5229) The ATM displays an error message on its monitor 
screen . 

10 FIG. 19 is the forth part of the same flowchart. 

{S230) The ATM examines whether a temporary electronic 
wallet device has been inserted thereto. If so, the 
process skips to step S232. If not, the process 
proceeds to step S231. 

15 (S231) The ATM displays a message to prompt the 
customer to insert a temporary electronic wallet 
device, and waits for the insertion. The customer 
then inserts his/her temporary electronic wallet 
device into the ATM. 

20 (S232) The customer enters his/her temporary user 
authentication data for the temporary electronic 
wallet device . 

(5233) The customer enters his/her user authentication 
data for the reissued version of the electronic 

25 wallet device . 

(5234) The ATM transmits the reissuance application 
data to the electronic wallet management unit , 
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together with the above two sets of user 
authentication data entered by the customer. If this 
data transfer, is successfully finished, the 
electronic wallet management unit returns a data set 
5 that should be written into the memory of a new 

electronic wallet device to be reissued. 
(S235) The ATM determines whether the data transfer was 
successful. If so, the process advances to step S240. 
If not, the process proceeds to step S236. 
10 (S236) The ATM displays an error message on the monitor 
screen . 

{S237) The ATM determines whether the valid period of 
the temporary electronic wallet device has already 
expired. If so, the process advances to step S239. 

15 If not, the process proceeds to step S238. 

{S238) The ATM ejects the temporary electronic wallet 

device and exits from the process. 
(S239) The ATM traps and collects the temporary 
electronic wallet device and exits from the process. 

20 (8240) The ATM prepares an electronic wallet device for 
reissuance. More specifically, it writes the user 
authentication data, financial institution data, and 
other various data to the memory of an electronic 
wallet medium stocked in the ATM. 

2 5 (S241) The ATM displays a message on the monitor screen 
to indicate that the reissuance process has 
successfully finished. 
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(S242) The ATM outputs the reissued electronic wallet 
device and exits from the process. 

The above section has described how the ATM 
handles a reissuance application for an electronic wallet 
5 device. The electronic wallet management unit responds to 
this application by executing an electronic wallet issuing 
process . 

FIG. 20 is the first part of a flowchart which 
shows the electronic wallet issuing process. All 
10 processing steps constituting this process are executed by 
the electronic wallet management unit . 

(5301) The electronic wallet management unit receives a 
message from a terminal station (ATM) . 

(5302) Parsing the received message, the management 
15 unit determines whether it is an accident report 

concerning an electronic wallet device. If so, the 
process advances to step S303. If not, it means that 
the customer wishes to receive a reissued electronic 
wallet device. The process therefore proceeds to 

20 step S317 (FIG. 22). 

(8303) Based on the user authentication data, the 
management unit makes access to its local database 
which functions as the financial institution 
database and electronic wallet database described 

2 5 earlier. 

(S304) The management unit determines whether the 
database access has successfully been performed. If 
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so, the process advances to step S305. If not, the 
process proceeds to step S306. 
(S305) The management unit determines whether the user 
authentication data that the customer entered to the 
5 ATM agrees with what has been stored in the 

electronic wallet database for verification purposes. 
If they agree with each other, the process advances 
to step S307. If not, the process proceeds to step 
S306. 

10 {S306) The management unit transmits an error message 
to the terminal station and then exits from the 
current process. 
{S307) The management unit updates a relevant 
reissuance status word in the electronic wallet 
15 database. 

FIG. 21 is the second part of the same flowchart, 
{S308) The management unit determines whether it is 
unnecessary to issue a temporary electronic wallet 
device. The process proceeds to step S313 if no 
20 temporary electronic wallet device is required. 

Otherwise, the process advances to step S309. 
(8309) The management unit calculates a time difference 
(T) between the time when the reissuance application 
was accepted and the time of the last backup 
25 operation. 

(S310) The management unit multiplies the balance of 
the electronic wallet device at the time of the last 
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backup by F(T), a function of the time difference T. 
It then divides the product by 100, thereby 
obtaining the credit limit. The function F{T) may be 
as follows, for example. 
5 F{T) = exp(-T/k)x MaxCw + ( l-exp( -T/k) ) x MinCw 

= exp( -T/k)x(MaxCw - MinCw) + MinCw ...(1) 
where "exp" denotes an exponential function, MaxCw 
is a maximum creditworthiness [%], MinCw is a 
minimum creditworthiness [%], T is the time 

10 difference (0^ T <oo), and k is a constant not 

smaller than one. The maximum creditworthiness and 
minimum creditworthiness, each ranging from zero to 
100, are previously determined in accordance with 
the customer's creditworthiness. The maximum 

15 creditworthiness must be greater than the minimum 

creditworthiness. The more creditworthy he/she is, 
the greater their difference becomes . The value of 
F(T) equals the maximum creditworthiness in the 
extreme case where the time difference T is zero 

20 (i.e., the time of the last backup equals the time 

of the reissuance application). F{T) approaches the 
value of the minimum creditworthiness as the time 
difference T grows. At infinity (T=oo) , F(T) 
converges to the minimum creditworthiness because 

25 exp (-T/k) becomes zero. 

(S311) The management unit compiles temporary 
electronic wallet data and sends it to the 
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requesting ATM. 

(5312) The management unit creates a database for 
managing the temporary electronic wallet . 

(5313) Toward a relevant financial institution 
5 processor, the management unit transmits data that 

is necessary for the reissuance. 

(5314) The management unit determines whether it has 
finished all relevant financial institutions. If so, 
the process advances to step S315. If not, the 

10 process returns to step S313, 

(5315) The management unit updates relevant records in 
the electronic wallet database. 

(5316) The management unit sends a message to the 
requesting ATM to indicate that the reissuance has 

15 been normally processed so far. 

FIG. 22 is the third part of the same flowchart. 

(5317) The management unit determines whether the 
customer wishes to receive a reissued electronic 
wallet device. If so, the process advances to step 

20 S318. If not, the process is terminated. 

(5318) The management unit determines whether the user 
authentication data that the customer entered to the 
ATM agrees with the authorized data that has been 
stored in the temporary electronic wallet issuance 

25 database. If they agree with each other, the process 

advances to step S319. If not, the process proceeds 
to step S323. 
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(5319) Based on the user authentication data for the 
temporary electronic wallet device, the management 
unit makes access to its financial institution 
database, temporary electronic wallet issuance 

5 database, and electronic wallet database. Through 

this database access, it retrieves the last backup 
data, transaction log records after the last backup, 
the credit limit and current balance of the 
temporary electronic wallet device, and other data. 
10 From such information, the electronic wallet 

management unit determines how much funds to 
transfer to a new electronic wallet device to be 
reissued. 

(5320) The management unit determines whether the 
15 database access has successfully been performed. If 

so, the process advances to step S321. If not, the 
process proceeds to step S322. 

(5321) The management unit determines whether it has 
fully prepared the data for a new electronic wallet 

20 device. If the data is ready, the process advances 

to step S327 (FIG. 23). If not, the process proceeds 
to step S322. 

(5322) The management unit sends an error message to 
the ATM and then exits from the current process . 

25 (S323) Based on the user authentication data, the 
management unit makes access to its financial 
institution database and electronic wallet database. 
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Through this database access, it retrieves the last 
backup data, transaction log records after the last 
backup, and other relevant data. From such 

information, the electronic wallet management unit 
5 determines how much funds to transfer to the 

electronic wallet device to be reissued. 

(5324) The management unit determines whether the 
database access is successfully performed. If so, 
the process advances to step S325. If not, the 

10 process proceeds to step S322. 

(5325) The management unit determines whether it has 
fully prepared the data for a new electronic wallet 
device to be reissued. If so, the process advances 
to step S326. If not, the process proceeds to step 

15 S322. 

(5326) The management unit determines whether the 
temporary electronic wallet device is in process of 
issuance. If so, the process advances to step S322, 
If not, the process proceeds to step S330 (FIG. 23). 

20 FIG. 23 is the fourth part of the same flowchart. 

(S32 7) The management unit traps and collects the 

temporary electronic wallet device. 
(S328) The management unit reads the balance of the 
temporary electronic wallet device. 
25 (S329) The management unit carries the balance of the 
temporary electronic wallet device over to the 
electronic wallet device to be reissued. 
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(5330) The management unit compiles data for the 
electronic wallet device to be reissued. 

(5331) The management unit supplies the compiled data 
to the ATM. 

5 (S332) The management unit notifies relevant financial 
institution processors of the completion of 
reissuance, 

(5333) The management unit determines whether it has 
sent the information to all the relevant financial 

10 institutions. If so, the process advances to step 

S334. If not, the process returns to step S332. 

(5334) The management unit removes relevant records 
from the temporary electronic wallet issuance 
database. 

15 (S335) The management unit sends a message to the 
terminal station (ATM) to indicate that the 
reissuance has successfully finished. 

In this way, the customer can receive a temporary 
electronic wallet device when his/her electronic wallet is 
20 lost or broken down. With this temporary electronic wallet 
device, he/she can make electronic money payments for the 
time being, without any problem. Also, the system reissues 
a new electronic wallet device promptly by using the 
stored backup data. As a result, the proposed system 
25 provides several advantages as described below. 

The proposed system provides typical backup 
conditions which are expected to happen in normal 
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financial transactions (both payment and reception) . The 
system makes a backup regularly or on demand when certain 
important transactions take place. More specifically, the 
system can be programmed to make a backup in the following 
5 occasions: when a certain number of online and offline 
financial transactions are performed (e.g., once every 
twenty transactions); at regular intervals (e.g., once 
everyday, or twice a week) ; when payment is made to 
particular payees (e.g., particular telephone company, 

10 particular gas company, particular newsdealer, particular 
laundry); and when payment is made for particular purposes 
(e.g., bus fares, train fares, payment for purchases 
through automatic vending machines, payphone charges). 

In addition to the above, the amount of money can 

15 be specified as a backup condition for any other 
unclassified transactions. This setup ensures backup 
operations when a large amount of money (e.g. , more than 
one million yen) is paid or received in a transaction. 

When a backup condition is met, the backup process 

20 is called up automatically by the system (i.e., requiring 
no customer input). Therefore, the result of every 
important transaction has to be recorded in the electronic 
wallet management unit. Suppose here that a customer lost 
his/her electronic wallet device. For the above-described 

25 reason, it is unlikely that he/she conducted an important 
transaction after the last backup was made and before 
his/her account was held down. This justifies the use of 
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backup data as a basis for issuing an alternative 
electronic wallet device, and thus enables prompt 
reissuance of an electronic wallet device. 

The present invention also allows the customer to 
5 receive and use a temporary electronic wallet device in 
electronic money transactions . This feature is provided as 
a temporary measure for supporting the customer until 
his/her electronic wallet device is reissued officially, 
which may take a couple of days . The credit limit of the 

10 temporary electronic wallet device is calculated on the 
basis of the elapsed time since the last backup operation, 
as well as depending on the creditworthiness of the 
customer. While the provision of a temporary electronic 
wallet device might pose a risk for relevant financial 

15 institutions, the above feature of the present invention 
will minimize that risk. 

Further, the proposed system is designed to 
reclaim a temporary electronic wallet device when an 
official version is reissued. The collected devices can be 

20 reused, which contributes to cost reduction and recycling 
of resources . 

While the invention has been explained on the 
assumption that the customer interacts with a reissuance 
application menu to some extent to get his/her electronic 
25 wallet device reissued, the system may also be configured 
to reissue it in a more automated fashion. That is, when a 
temporary electronic wallet device is in use, the system 
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checks whether the preparation of the reissuance is done. 
If the system is ready, the customer can readily obtain a 
reissued electronic wallet device. The next section will 
explain how the above service is realized at a terminal 
5 station (ATM). 

FIG. 24 shows the first half of an automatic 
reissuance procedure of an electronic wallet device. 

(S401) The ATM waits for the customer to select a 
command from a menu. 
10 (S402) The ATM determines whether the customer has 
inserted his/her card. If there is a card, the 
process skips to step S405. If not, the process 
proceeds to step S403. 

(5403) The ATM displays a message on the monitor screen 
15 to request the customer to insert his/her card. 

(5404) The ATM waits for the customer to insert his/her 
card . 

(5405) When a card is detected, the ATM determines 
whether the customer has selected a reissuance- 

20 related menu command (e.g., accident report or 

reception of a reissued wallet). If so, the current 
automatic reissuance process is terminated. If not, 
the process proceeds to step S406. 
{S406) The ATM provides a service (e.g., deposit, 

25 withdrawal, viewing balance) as requested by the 

customer, 

(S407) The ATM updates the account information related 



-61- 



to the card being inserted. In a fund withdrawal, 
for example, the ATM subtracts that amount from the 
current deposit . 
(S408) The ATM determines whether the inserted card is 
5 a temporary electronic wallet device. If so, the 

process advances to step S409 (FIG. 25). If not, the 
process proceeds to step S418 (FIG. 25). 

FIG. 25 shows the second half of the same 
procedure . 

10 (S409) The ATM sends a message to a server (e.g., 
electronic wallet management unit) to ask whether an 
electronic wallet device can be reissued. 

In response to this confirmation message, the 
server determines whether it is ready to send data 
15 for reissuance. If it is ready, the server returns a 

positive response message to indicate its readiness. 
If not, the server returns a negative response. 
(8410) The ATM receives a message from the server. 

(5411) The ATM determines whether it is possible to 
20 reissue an electronic wallet device. If so, the 

process advances to step S412. If not, the process 
proceeds to step S419, 

(5412) The ATM reclaims the temporary electronic wallet 
device . 

25 (S413) The ATM reads the balance of the temporary 
electronic wallet device. 
(S414) The ATM reissues an electronic wallet device. 
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{S415) The management unit carries the balance of the 

temporary electronic wallet device over to the 

reissued electronic wallet device. 
(S416) The ATM displays a message indicating that it is 
5 releasing the reissued electronic wallet device. 

(8417) The ATM releases the reissued electronic wallet 

device. The process advances to step S420. 
(S418) The ATM ejects the card that has been inserted 

to it. The process advances to step S420. 
10 (S419) The ATM outputs the temporary electronic wallet 

device. The process advances to step S420. 
(S420) The ATM shows to the customer how his/her 

request was processed, and it exits from the current 

process . 

15 The above processing steps makes direct reissuance 

of an electronic wallet device possible. That is, when the 
customer has inserted his/her temporary wallet and the 
electronic wallet data is ready for reissuance, the ATM 
uses it as an occasion to reissue the electronic wallet 

20 device to him/her. This mechanism eliminates the need for 
the customer to enter an explicit command to have his/her 
lost electronic wallet device reissued. 

The above -described processing mechanisms of 
electronic wallet devices, electronic wallet device 

25 management units, and terminal stations, and financial 
institution processorc are actually implemented as 
software functions of a computer system. In that case, the 
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proposed processing steps are encoded in the form of 
computer programs, which will be stored in a computer- 
readable storage medium. The computer system executes 
those programs to provide the intended functions of the 
5 present invention. Suitable computer -readable storage 
media include magnetic storage media and semiconductor 
memory devices. Particularly, portable storage media, such 
as CD-ROMs and floppy disks, are suitable for circulation 
purposes. Further, it will be possible to distribute the 

10 programs through an appropriate server computer deployed 
on a network. Program files delivered to users are 
normally installed in their computers ' hard drive or other 
local mass storage devices, which will be executed after 
being loaded to the main memory. 

15 The above explanation of the present invention 

will now be summarized below. According to the present 
invention, the proposed electronic wallet management 
system is configured to save a predetermined set of wallet 
data to a backup database if a prescribed backup condition 

20 is met when the customer uses his/her electronic wallet 
device. Even if an electronic wallet device is lost or 
failed, the system preserves relatively recent records of 
that device. The use of such backup data reduces the time 
required for collecting information about the lost or 

2 5 failed electronic wallet device, thus permitting the 
system to reissue the device more promptly. This solves 
the inconvenience that the customer would experience if 
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he/she could not use an electronic wallet for a long time. 

Also, according to the present invention, the 
electronic wallet device is configured to provide a 
predetermined set of backup data if any backup condition 
5 is satisfied when it is used in transferring funds. By 
storing such backup data, an electronic wallet management 
unit can promptly reissue an alternative electronic wallet 
device when a customer lost his/her own device. 

Further, according to the present invention, the 

10 electronic wallet management unit is configured to provide 
temporary electronic wallet data having a limited valid 
period and a credit limit that is determined according to 
the elapsed time since the last backup operation, when an 
accident report is received from a terminal station . A 

15 temporary electronic wallet device containing such 
temporary electronic wallet data can be issued to the 
customer for the sake of his/her convenience, with a 
minimum risk at the issuer side. 

Moreover, according to the present invention, the 

20 proposed terminal station is configured to forward an 
accident report concerning an electronic wallet device to 
an electronic wallet management unit, receive temporary 
electronic wallet data from the unit, write that data to a 
memory of a temporary electronic wallet device , and 

25 release the device. That is, by entering an accident 
report to a terminal station, the customer can receive a 
temporary electronic wallet device which supports him/her 
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for the time being. 

Furthermore, according to the present invention, a 
computer- readable medium storing an electronic wallet 
management program is provided. This program is configured 
5 to cause a computer to save a predetermined set of backup 
data to a backup database, if a certain backup condition 
is met when an electronic wallet device is used. The 
stored electronic wallet management program can be 
executed on a computer system, which causes the computer 
10 system to function as the proposed automatic backup 
mechanism. 

The foregoing is considered as illustrative only 
of the principles of the present invention. Furthre, since 
numerous modifications and changes will readily occur to 

15 those skilled in the art, it is not desired to limit the 
invention to the exact construction and applications shown 
and described, and accordingly, all suitable modifications 
and equivalents may be regarded as failing within the 
scope of the invention in the appended claims and their 

2 0 equivalent s . 
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